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IN THE SPECIFICATION: 

The specification as amended below with replacement paragraphs shows added text 
with underlining and deleted text with strik e through . 

Please REPLACE the paragraph at page 38, lines 1-5, with the following paragraph: 

TABLE 2. Relation between Mask Value and Amount of Computation Required for 
Determining 128-bit Secret Key by DPA of Loading Sbox Qoteyt -lnput V alues, for One Common 
Sbox Set for Subbytes, in Fixed Mask Value Method. 

Please REPLACE the paragraph at page 41 , lines 1-1 5, with the following paragraph: 

The F function of FIGURE 33B includes a selector 759 for providing a fixed mask value 
FMi,h selected in response to the random number h, an XOR 762 for XORIng the sub-key Kj with 
the fixed mask value FMj,h to provide an output, an XOR 763 for XORIng the output value with an 
input Xi' linearly transformed by a linear transform E, selectors 752 to 756 for selecting one of 
Subbytes [[Sj.h]] Si^jn response to the random number h to provide the output from the XOR 
763, Subbytes [[Sj h]] S^ijor performing the Subbyte in accordance with the respective nonlinear 
table Sboxes [[Sj.h]] Sy^, selectors 754 to 757 for selecting one of the Subbytes [[S|,h]] S^h in 
response to the random number h to provide an output, and a linear transform P for linearly 
transforming the output from the selectors 754 to 757 to provide an output ZW 

Please REPLACE the paragraph at page 42, lines 24-30, with the following paragraph: 

The F function of FIGURE 348 includes an XOR 862 for XORIng the input Xi* linearly 
transformed by a linear transform E with the XOR value of the sub-key Ki with the fixed mask 
value FMj,h, Subbytes [[S|,h]] S^^Q = 1,2, ... 8) in accordance with the nonlinear table SBoxes Si,h, 
and a linear transform P for linearly transforming the output from the Subbyte [[Si,h]] Syi^to 
provide an output Zi'. 
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